$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa File: c50bf71f-42f4-380a-89be-7d4e918b0444.roa (raw, json) Hash identifier: aJJ5K0oVv2QkvS7pDNh/wj6t4mxp1J0Aiaa6HEwogTs= Subject key identifier: 47:66:1A:81:ED:0C:EB:B6:53:08:EF:4A:A3:B7:35:73:A7:18:AB:9D Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584B5571D053823D02ABAEC2D880 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 852 IP address blocks: 209.53.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d0:53:82:3d:02:ab:ae:c2:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=d2e5b0eb-32a5-4307-a8de-3862cbb47eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ee:27:3c:f4:d9:17:ca:f5:46:2d:0e:37:c7: 8c:da:6e:2d:cd:b5:7e:0c:78:52:06:31:d8:fe:63: 14:a9:dc:25:5b:e8:c9:b4:2a:5a:ec:c0:5c:4c:99: 0e:90:b7:df:a7:fa:96:b9:d7:27:0b:99:b1:93:c6: 51:b2:cc:34:01:52:2b:89:b5:a0:20:c1:eb:0c:4f: c2:0e:ea:41:f4:b3:94:f2:4c:58:8c:e3:86:a7:ab: 83:46:fe:45:31:22:1a:3e:50:c8:a9:04:92:cd:7b: 92:16:e8:2d:e6:a6:12:c1:a3:4b:83:3b:bd:db:e3: f0:7e:94:f2:05:eb:80:7a:a4:8f:78:2b:9f:b8:7d: 0e:3c:4b:06:1c:c2:05:c2:c2:83:e5:15:68:8b:90: d6:4f:e4:45:d4:19:4f:da:3c:d0:38:59:62:53:94: 71:71:8d:a4:77:83:8b:8a:48:a1:c0:6e:88:5f:fb: 17:1c:55:10:13:d2:c0:3a:4d:6f:fd:e2:f6:93:4b: ea:a5:b6:c9:83:42:8f:84:a7:cd:67:81:a6:ed:75: e4:99:f3:1d:97:de:f7:81:f6:59:36:b6:40:74:5c: 3e:1a:24:67:b1:29:60:44:6a:24:85:da:50:be:29: a6:be:02:4e:25:69:9d:e4:cc:ee:d2:8c:32:63:3e: a4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:66:1A:81:ED:0C:EB:B6:53:08:EF:4A:A3:B7:35:73:A7:18:AB:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c50bf71f-42f4-380a-89be-7d4e918b0444.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ac:ac:0a:bf:e5:1b:da:d1:d4:4f:e0:82:75:bb:5b:00:9e: fc:14:ee:0d:f0:5b:76:9a:bd:58:7e:60:5e:c3:8b:51:17:a1: 18:dd:dd:c2:74:26:e1:18:5b:0a:45:fa:76:3d:fa:98:a8:e5: 74:77:3c:69:8a:e9:a8:01:16:b5:f4:83:b7:82:e3:0d:52:a1: 83:b2:7d:91:09:95:20:95:47:75:37:a4:5f:cb:d3:9d:d7:37: fd:08:c4:63:a1:e6:45:4c:40:2d:72:e3:95:35:a4:a3:6f:5d: c0:ed:34:58:e9:89:03:41:95:80:0b:f5:de:a3:38:b5:92:36: 7d:43:00:38:78:0f:95:ac:78:bb:5f:fc:cf:0a:2e:05:9e:75: 93:b0:04:11:b5:e7:82:f8:63:29:a5:b9:37:e4:dd:05:a8:57: 81:d0:ae:9d:6d:83:6d:d5:34:76:02:c3:a4:d7:55:38:15:58: a7:d8:50:71:0e:83:c6:70:a3:4a:d0:0e:5b:fa:c4:4e:36:3b: f7:95:5c:51:e1:f1:be:7c:1b:d8:34:64:f4:5b:ab:6a:31:3d: fd:3e:5c:29:22:28:a9:87:e1:cd:14:f4:78:55:1f:ed:a0:95: 5e:a6:0d:e3:3a:7e:e8:79:52:55:71:0c:15:84:b2:f7:9d:f9: 49:d8:39:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdBTgj0Cq67C2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDJlNWIwZWItMzJhNS00MzA3LWE4ZGUtMzg2MmNiYjQ3ZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO4nPPTZF8r1Ri0ON8eM2m4tzbV+DHhSBjHY /mMUqdwlW+jJtCpa7MBcTJkOkLffp/qWudcnC5mxk8ZRssw0AVIribWgIMHrDE/C DupB9LOU8kxYjOOGp6uDRv5FMSIaPlDIqQSSzXuSFugt5qYSwaNLgzu92+PwfpTy BeuAeqSPeCufuH0OPEsGHMIFwsKD5RVoi5DWT+RF1BlP2jzQOFliU5RxcY2kd4OL ikihwG6IX/sXHFUQE9LAOk1v/eL2k0vqpbbJg0KPhKfNZ4Gm7XXkmfMdl973gfZZ NrZAdFw+GiRnsSlgRGokhdpQvimmvgJOJWmd5Mzu0owyYz6kgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdmGoHtDOu2UwjvSqO3NXOnGKudMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzUwYmY3MWYtNDJmNC0z ODBhLTg5YmUtN2Q0ZTkxOGIwNDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TWNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2srAq/5Rva0dRP4IJ1u1sAnvwU7g3wW3aavVh+YF7Di1EXoRjd3cJ0 JuEYWwpF+nY9+pio5XR3PGmK6agBFrX0g7eC4w1SoYOyfZEJlSCVR3U3pF/L053X N/0IxGOh5kVMQC1y45U1pKNvXcDtNFjpiQNBlYAL9d6jOLWSNn1DADh4D5WseLtf /M8KLgWedZOwBBG154L4YymluTfk3QWoV4HQrp1tg23VNHYCw6TXVTgVWKfYUHEO g8Zwo0rQDlv6xE42O/eVXFHh8b58G9g0ZPRbq2oxPf0+XCkiKKmH4c0U9HhVH+2g lV6mDeM6fuh5UlVxDBWEsved+UnYOUc= -----END CERTIFICATE-----Generated at Sun Oct 19 22:35:48 2025 by rpki-client